CVE-2026-10848 | ZephyrProject Zephyr up to 4.4.x OCPP Client ocpp_j.c parse_rpc_msg out-of-bounds

A vulnerability, which was classified as critical, has been found in ZephyrProject Zephyr up to 4.4.x. Affected by this vulnerability is the function parse_rpc_msg of the file subsys/net/lib/ocpp/ocpp_j.c of the component OCPP Client. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-10848. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More